$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f9c30950-1899-3256-a75e-ccfa35eea089.roa File: f9c30950-1899-3256-a75e-ccfa35eea089.roa (raw, json) Hash identifier: We+71+I0F4bswO/IePs7Ma4zCRVdb3O2t4y4RvExoPw= Subject key identifier: C4:8E:A2:21:D8:ED:41:39:C4:0C:37:C0:67:23:BF:4B:E9:89:7D:70 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D8D8FF732B5443ECC93B20380 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f9c30950-1899-3256-a75e-ccfa35eea089.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 23473 IP address blocks: 66.253.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:8f:f7:32:b5:44:3e:cc:93:b2:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=1b08723e-abad-4d45-a9b7-5f37ef814c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3d:e2:ad:41:6f:2d:a3:3e:8a:97:7b:ad:ed: 11:3a:f9:1b:5e:e8:cd:ba:b3:a3:68:5e:b1:d6:af: ae:d0:0a:3b:06:be:89:9f:6a:37:bb:bf:00:fd:8c: 25:32:7d:1f:73:84:bf:58:36:f5:5d:d1:36:53:ad: 8f:d7:3e:aa:2b:05:8a:00:65:fe:5f:93:82:26:e0: b2:d1:97:91:43:e2:d9:3d:ee:86:b0:d1:1c:a6:f2: e4:9d:3b:c1:e3:d4:a6:35:55:f9:4e:92:f6:be:20: fc:ef:58:ea:35:45:a3:7c:40:28:9d:9c:a3:00:70: bf:11:63:d2:54:0a:e8:b8:0d:17:1a:07:b9:d0:22: fc:3c:60:90:3f:22:3e:c7:1e:19:04:14:ba:96:f8: 57:8f:cf:5b:21:c0:b2:ea:05:8f:5a:1c:de:59:ba: 91:3c:dc:d4:fc:e9:14:dd:46:06:48:5c:fe:fc:9e: f1:79:b5:c2:43:68:2c:33:58:33:cd:a8:7e:00:16: a3:5c:4b:75:58:5b:6d:23:2d:66:21:cb:58:57:31: ed:63:9a:51:d3:88:45:f3:6e:47:65:0f:d0:6e:07: 50:40:5f:fd:78:ab:06:65:c6:50:5d:12:a4:0e:dd: 05:f3:25:d8:49:03:11:ea:44:b8:32:d5:4e:ef:38: bc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:8E:A2:21:D8:ED:41:39:C4:0C:37:C0:67:23:BF:4B:E9:89:7D:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f9c30950-1899-3256-a75e-ccfa35eea089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:ac:fb:38:df:81:49:2e:b5:b5:4d:26:89:6f:2e:f6:ba:3c: 29:ed:57:1f:1b:61:46:cb:e0:bd:91:0f:c9:ec:b7:50:63:f1: b1:2f:0c:bf:92:68:20:c2:d5:ff:26:18:cb:bd:22:fc:5b:56: ec:90:32:7d:76:46:d3:10:a6:6f:45:91:82:40:ff:55:54:e1: 08:2e:7b:aa:c2:48:12:bb:c1:d8:46:6a:07:e2:96:74:6d:51: 0c:22:b3:f0:11:90:5f:00:0b:c3:d2:b0:59:9f:1e:b8:bd:92: a6:a7:87:d0:b2:d1:59:cc:e2:6f:e4:0d:72:ca:c7:50:a1:e8: 3e:94:2d:1c:86:fc:85:b6:6b:e2:59:5e:58:bf:b8:ff:19:87: 2b:82:55:47:68:31:0e:9b:08:85:84:c7:19:00:1f:4a:eb:7a: 68:12:cf:ff:93:83:49:b0:79:b5:dc:71:f7:d1:cb:49:af:52: 16:70:02:81:12:34:7f:78:12:a5:0e:45:76:d4:38:d2:cd:7b: a8:0a:a6:0e:2b:7d:07:08:b9:08:15:e8:86:86:58:8d:af:50: 92:c0:06:66:19:3f:07:c1:71:92:3a:0b:aa:00:bd:37:67:2f: bb:3d:c5:3c:00:22:16:92:eb:87:5f:da:59:0d:ae:97:56:5e: 63:9d:80:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Nj/cytUQ+zJOyA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk MWIwODcyM2UtYWJhZC00ZDQ1LWE5YjctNWYzN2VmODE0YzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD3irUFvLaM+ipd7re0ROvkbXujNurOjaF6x 1q+u0Ao7Br6Jn2o3u78A/YwlMn0fc4S/WDb1XdE2U62P1z6qKwWKAGX+X5OCJuCy 0ZeRQ+LZPe6GsNEcpvLknTvB49SmNVX5TpL2viD871jqNUWjfEAonZyjAHC/EWPS VArouA0XGge50CL8PGCQPyI+xx4ZBBS6lvhXj89bIcCy6gWPWhzeWbqRPNzU/OkU 3UYGSFz+/J7xebXCQ2gsM1gzzah+ABajXEt1WFttIy1mIctYVzHtY5pR04hF825H ZQ/QbgdQQF/9eKsGZcZQXRKkDt0F8yXYSQMR6kS4MtVO7zi8FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSOoiHY7UE5xAw3wGcjv0vpiX1wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZjljMzA5NTAtMTg5OS0z MjU2LWE3NWUtY2NmYTM1ZWVhMDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEas+zjfgUkutbVNJolvLva6PCntVx8bYUbL4L2RD8nst1Bj8bEvDL+S aCDC1f8mGMu9IvxbVuyQMn12RtMQpm9FkYJA/1VU4Qgue6rCSBK7wdhGagfilnRt UQwis/ARkF8AC8PSsFmfHri9kqanh9Cy0VnM4m/kDXLKx1Ch6D6ULRyG/IW2a+JZ Xli/uP8ZhyuCVUdoMQ6bCIWExxkAH0rremgSz/+Tg0mwebXccffRy0mvUhZwAoES NH94EqUORXbUONLNe6gKpg4rfQcIuQgV6IaGWI2vUJLABmYZPwfBcZI6C6oAvTdn L7s9xTwAIhaS64df2lkNrpdWXmOdgBM= -----END CERTIFICATE-----Generated at Thu May 7 03:14:38 2026 by rpki-client